On Fri, Jul 03, 2020 at 05:32:28AM +0300, Jarkko Sakkinen wrote:

On Mon, Jun 29, 2020 at 06:02:42PM +0200, Borislav Petkov wrote:

quoted

On Thu, Jun 18, 2020 at 01:08:34AM +0300, Jarkko Sakkinen wrote:

quoted

Provisioning Certification Enclave (PCE), the root of trust for other
enclaves, generates a signing key from a fused key called Provisioning
Certification Key. PCE can then use this key to certify an attestation key
of a QE, e.g. we get the chain of trust down to the hardware if the Intel

What's a QE?

I don't see this acronym resolved anywhere in the whole patchset.

Quoting Enclave.

Thanks for spotting this. I updated my GIT-tree accordingly.

/Jarkko